Lucene search

K
osvGoogleOSV:CVE-2023-47622
HistoryApr 15, 2024 - 6:15 p.m.

CVE-2023-47622

2024-04-1518:15:08
Google
osv.dev
7
itop
it service
xss
vulnerability
fixed
3.0.4
3.1.1

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:CVE-2023-47622